Privacy Policy

Effective date: October 18, 2026 · Last updated: October 18, 2026

This Privacy Policy explains what information Open Field Group ("Open Field Group," "we," "us," or "our") collects when you use FedRegBrief, including fedregbrief.com, our email digests, account pages and reply-to-track feature (the "Service"). It also explains how we use that information, who we share it with, and the choices you have. It should be read together with our Terms of Service.

The short version

• We collect very little: your email address, your company, your coverage profile, your team setup, the items you track, and the routine technical logs every website keeps.
• We don't sell your personal information or share it for targeted advertising. We don't use advertising cookies or third-party ad trackers.
• Your company profile and digests are confidential. We never share them with other customers.
• We don't store card numbers. Payments go through our payment processor.
• You're in control. Unsubscribe with one click, and ask us at any time to see, correct, or delete your information.

1. Information we collect

Information you give us

• Subscriber details: your email address and the agencies you choose. We also keep a record of your double opt-in confirmation (when you confirmed and from which IP address), so we can show you asked to subscribe.
• Account and company profile (paid plans): your company name and work email, plus the profile you build with us, such as your operations, locations, assets, equipment, products, regulatory interests and topics to exclude.
• Team setup: team names and the work email addresses of the recipients your company adds.
• Tracked items and replies: the emails you send to your reply-to-track address, and the items we pull from them, such as document numbers, dockets and RINs.
• Support messages: anything you send when you contact us.

Payment information. Payments are processed by our payment processor, such as Stripe. The processor collects your card details directly, and we never receive or store full card numbers. We receive limited billing information from the processor, such as your plan, payment status, billing name and address, and the card brand, last four digits and expiration date.

Information collected automatically

• Server and security logs: IP address, browser type, the pages or API endpoints requested, timestamps and error information. We use these logs to run, secure and debug the Service and to prevent abuse.
• Email delivery data: our email service provider tells us whether a message was delivered, bounced, or marked as spam. We use this to keep our mailing lists healthy and to stop sending to addresses that bounce or complain.
• No open or click tracking. Our digests don't contain tracking pixels, and their links go directly to official sources, without tracked redirects.

Cookies and similar technologies. We keep this minimal. Today the Service sets no advertising or analytics cookies. When you sign in, your browser keeps a session token in its session storage until you sign out or close the tab. We may also use strictly necessary cookies or similar storage for security, such as rate limiting and fraud prevention. Because we only use what's needed for the Service to work, you won't see a cookie banner. You can clear or block cookies and storage in your browser settings, but signing in may then stop working. If we ever add analytics or other non-essential cookies, we'll update this policy first and offer the choices the law requires.

We don't knowingly collect sensitive personal information, and we ask you not to put it in your profile or replies.

2. How we use information

We use information to:

• deliver the Service, including confirming subscriptions, building and sending digests, matching Federal Register documents to your profile, running team breakouts, and processing tracked items;
• manage accounts, trials and billing, including enforcing our one-free-trial-per-company rule;
• send service messages, such as sign-in links, receipts, renewal and trial notices, and changes to our terms;
• respond to support requests;
• keep the Service secure, prevent fraud, spam and abuse, and enforce our Terms;
• improve coverage and quality, including through the aggregated, de-identified review described below; and
• meet our legal obligations, such as tax and accounting rules and email laws.

AI tools. We use AI tools, which may include third-party AI providers, to help draft plain-English summaries of public Federal Register documents. For paid plans, we may also use them to judge how relevant a document is to your profile. When we send any part of your profile to an AI provider, we use providers whose terms prohibit them from using customer data to train their models and require them to keep it confidential. [CONFIRM VENDOR TERMS BEFORE LAUNCH] We don't use AI to make decisions about you that have legal or similarly significant effects.

3. Confidentiality and aggregated review

Your company profile, tracked items and digests are confidential. We never share them with, or show them to, other customers.

To make coverage better for everyone, we sometimes look at patterns across customers internally. For example, we might check whether one kind of document is often relevant to a certain kind of operation, so we catch it for similar profiles in future. We only do this with aggregated, de-identified information that doesn't identify you or your company. We don't publish or sell this information, and we don't try to re-identify it.

4. How we share information

We share information only in these cases:

• Service providers who process it on our behalf, under contracts that limit their use of it to providing services to us. These include our hosting provider, our email service provider, which sends and receives digest and reply email, our payment processor, and AI providers, as described above.
• Within your company. The account owner your company designates, and the team recipients it adds, can see your company's profile, team digests and tracked items.
• Legal reasons. We may disclose information if we believe in good faith that we must do so to comply with the law, a subpoena or court order. We may also disclose it to protect the rights, safety or property of our users, the public or Open Field Group, or to investigate fraud or security problems. Where the law allows, we'll try to notify you first.
• Business transfers. If Open Field Group or FedRegBrief is involved in a merger, acquisition, financing or sale of assets, information may be transferred as part of that deal. It will remain subject to this policy, or to a policy that is at least as protective, and we'll tell you about any change.
• With your consent or at your direction.

We do not sell personal information, and we do not "share" it for cross-context behavioral (targeted) advertising, as those terms are defined in state privacy laws. We don't rent or sell our mailing lists, and we don't use third-party lists to sign people up.

5. Your email choices (CAN-SPAM)

• Free digests are sent only after you confirm by double opt-in.
• Every digest has a one-click unsubscribe link. You can drop a single agency or unsubscribe from all of them. Email programs that support one-click unsubscribe will also show a button. We process unsubscribes right away, and always within 10 business days.
• After you unsubscribe, we keep a minimal suppression record (your email address and the date) so we don't email you again by mistake.
• Our commercial emails identify Open Field Group as the sender, use accurate subject lines, and include our mailing address: 1550 Wilson Blvd, Ste 700 PMB658, Arlington, VA 22209.
• While you have an account, we'll still send service messages about it, even if you unsubscribe from digests.

6. How long we keep information

We keep information only as long as we need it for the purposes above, or as long as the law requires. Our standard retention periods are:

When we no longer need information, we delete it or de-identify it.

7. Your privacy rights and deletion requests

You can unsubscribe at any time, and update your profile, teams and tracked items from your account page. You can also ask us to:

• access the personal information we hold about you, or get a portable copy of it;
• correct information that's inaccurate;
• delete your personal information;
• opt out of any sale, targeted-advertising sharing or profiling with significant effects (we don't do any of these, but you can still ask); and
• appeal if we turn down your request.

How to ask. Email privacy@fedregbrief.com from the address on your account, or write to us at the mailing address below. We'll confirm we've received your request within 10 business days and answer within 45 days. If we need more time, we'll tell you why, and we may extend the deadline by up to another 45 days where the law allows. To protect your account, we'll confirm your identity first, usually by asking you to reply from the email address on file. You can use an authorized agent if your state allows it, but we may ask for proof that you authorized them.

What deletion covers. When we delete your data, we remove your profile, tracked items and subscriber records from our live systems. Copies in backups roll off on the schedule above. We may keep information the law requires us to keep, such as invoices, and a suppression record so we don't email you again.

No discrimination. We won't charge you more or treat you differently for exercising your privacy rights.

California and other U.S. states. Residents of California and of other states with comprehensive privacy laws, such as Colorado, Connecticut, Virginia, Texas and Oregon, may have the rights listed above. Many of these laws exempt business contact information or business-to-business services, but we honor these requests from all users, wherever they live. For California residents, in the past 12 months we have collected these categories of personal information: identifiers (such as name, email address and IP address), commercial information (such as plan and billing history), internet activity (such as server logs), and professional information (such as company and role). We collected it from you, from your company, and automatically through your use of the Service, for the purposes described in section 2. We disclosed it only to the service providers described in section 4. We have not sold or shared it, and we don't use or disclose sensitive personal information for purposes that would give you a right to limit that use.

Do Not Track and Global Privacy Control. We don't track you across other websites, so there's nothing for Do Not Track to switch off. If your browser sends a Global Privacy Control signal, we'll treat it as a request to opt out of sale and sharing.

8. Security

We use reasonable administrative, technical and physical safeguards to protect your information. These include encryption in transit (HTTPS/TLS), one-time sign-in links, signed unsubscribe tokens, access limits, rate limiting, and keeping only the data we need. No system is perfectly secure, so we can't guarantee absolute security. If a breach affects your personal information, we'll notify you and the authorities as the law requires.

9. Children

FedRegBrief is a business service for adults. It isn't directed to children, and children under 13 may not use it. We don't knowingly collect personal information from children under 13. If we learn that we have, we'll delete it. If you believe a child has given us information, contact privacy@fedregbrief.com.

10. Where we process information

We're based in the United States and store and process information in the United States. The Service is meant for U.S. federal regulatory coverage. If you use it from outside the U.S., your information will be transferred to and processed in the U.S., where privacy laws may differ from those in your country.

11. Third-party sites

Digests link to official sites such as federalregister.gov and regulations.gov, as well as agency websites. Those sites have their own privacy practices, which this policy doesn't cover.

12. Changes to this policy

We may update this policy. If we make a material change, we'll email account holders and subscribers and post a notice on the site at least 15 days before it takes effect. We'll also update the "Last updated" date. If a change would let us use personal information we already hold in a materially different way, we'll ask for your consent where the law requires it.

13. Contact us

Open Field Group (FedRegBrief)
1550 Wilson Blvd, Ste 700 PMB658, Arlington, VA 22209 Privacy requests and questions: privacy@fedregbrief.com
General support: support@fedregbrief.com